Security audit
Security checks for vulnerabilities and agentic risk
This is a prompt-only Chinese novel-writing workflow skill with no hidden code, network use, credential access, or persistence beyond optional user workspace project files.
Installers should know this skill may strongly structure creative-writing requests into a seven-stage web-novel workflow and may suggest saving project files in the workspace. Review or adjust the trigger wording and market category labels if you want a lighter or more neutral writing assistant.
The skill metadata advertises many broad trigger phrases such as '写小说', '续写', '扩写', and '角色设定', which are common terms that may appear in ordinary conversation. Overbroad activation increases the chance the skill is invoked when the user did not intend to enter this structured workflow, causing prompt hijacking of unrelated requests or unwanted file/project behaviors.
The usage guidance includes loose examples like '我要写一部小说', '帮我生成角色设定', '续写下一章', and especially '一键全篇', but does not define boundaries for when the skill should not activate or when confirmation is required. This ambiguity can cause the assistant to over-apply the skill to adjacent creative-writing requests, reducing user control and potentially initiating unintended long-form workflows or file-management steps.
The configuration schema directs categorization into "男频 / 女频 / 通用" and platform presets without stating that these labels are optional or user-selected. This can impose a fixed framing or locale/cultural categorization on the user’s work instead of offering a neutral choice first.
